PASS sa-state: whole model and 2 exact reachable sources; only unique fresh role IDs borrowed